Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/a979932f6f1b505f1b5e57f580303bd1a7ecba8c.roa
File:                     a979932f6f1b505f1b5e57f580303bd1a7ecba8c.roa (raw, json)
Hash identifier:          g1CfiCzMH4PTgWE9o1KyJf9D3yxzdAa9G9yBmKM6hIo=
Subject key identifier:   A1:B5:8D:6D:C7:D9:0A:40:9A:A8:C5:14:59:B3:54:F9:67:D9:24:76
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       065106
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/a979932f6f1b505f1b5e57f580303bd1a7ecba8c.roa
Signing time:             Wed 24 Mar 2021 14:33:35 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     395378
IP address blocks:        181.215.240.0/22 maxlen: 24
                          181.215.5.0/24 maxlen: 24
                          191.96.194.0/24 maxlen: 24
                          191.96.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413958 (0x65106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=a979932f6f1b505f1b5e57f580303bd1a7ecba8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c4:89:5e:6b:ab:d1:4b:40:be:36:90:dd:70:
                    fd:88:dd:35:8b:4b:e4:43:42:ef:47:84:4f:f7:51:
                    4f:0b:bd:60:8c:c9:30:e6:c7:8a:45:7e:4f:16:fa:
                    08:27:bb:54:47:20:ed:f8:3d:33:48:c1:c9:44:0b:
                    0e:a9:42:5b:bf:ef:68:21:20:55:73:39:07:33:f2:
                    95:a1:62:f3:68:85:43:da:46:fc:95:76:f6:09:67:
                    64:48:33:1c:dc:c5:c4:56:e4:7b:6e:3d:fa:6c:89:
                    69:c1:a4:47:d0:13:b4:fb:27:7d:be:67:47:4b:f6:
                    61:6a:76:f4:f2:79:f3:fa:31:46:87:ac:20:fa:1f:
                    38:fd:3d:5c:85:85:78:08:40:c3:3c:22:58:38:b8:
                    6b:7d:68:6a:88:ef:a0:f1:88:c6:bf:b0:2e:45:76:
                    e5:63:4a:0e:dc:02:81:8e:d7:0c:5a:23:e4:10:24:
                    12:88:a3:34:78:20:9b:d9:23:52:63:5e:65:df:6e:
                    f9:47:25:e1:2a:08:59:fd:9c:5c:26:f5:62:3a:7a:
                    97:58:66:db:b6:d2:4a:31:c3:fd:fc:8b:b6:58:be:
                    ba:26:e5:1d:c5:2e:46:a8:92:48:a2:86:54:da:2f:
                    21:01:c8:70:59:4c:4c:66:32:8e:a2:3c:70:3d:13:
                    67:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B5:8D:6D:C7:D9:0A:40:9A:A8:C5:14:59:B3:54:F9:67:D9:24:76
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/a979932f6f1b505f1b5e57f580303bd1a7ecba8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.5.0/24
                  181.215.240.0/22
                  191.96.194.0/24
                  191.96.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:fe:35:d1:69:de:84:f0:fa:c1:16:bf:cd:a8:6e:19:3a:dc:
         6d:64:2d:31:9e:3a:ed:20:df:e7:27:b7:98:a5:9b:c3:e7:f3:
         22:6d:4b:07:b0:4b:80:1d:c0:ca:b9:25:b0:73:6c:e9:70:f4:
         35:77:c5:bd:c1:6e:1d:c4:29:63:c7:2f:2d:63:94:48:f2:15:
         81:44:6d:1a:64:4b:d6:2e:84:04:28:b1:92:67:96:62:aa:28:
         f3:95:3a:99:eb:78:60:ac:48:f1:6f:38:7e:0e:15:6f:36:8d:
         61:8c:1d:d6:6b:d6:7e:4e:8b:5e:64:a8:37:0a:ae:36:71:3c:
         81:11:db:c6:a4:69:30:e8:ad:2e:04:77:5a:b6:25:9d:72:d6:
         00:91:04:a9:eb:05:71:c0:33:da:7e:83:d6:7e:ea:2d:70:95:
         e1:92:a6:1f:ab:eb:92:88:31:cc:6a:a5:b3:7b:7b:90:d7:07:
         a5:3e:73:78:48:14:08:e0:38:29:97:06:95:e5:1d:c3:42:a1:
         36:2b:ba:d7:27:1e:cb:eb:a3:12:c8:3c:04:b0:df:1e:0e:4d:
         7d:70:68:56:14:f6:83:40:73:d3:22:de:c4:36:3c:7d:82:64:
         90:ea:1c:a3:0b:5f:a0:bd:95:01:b3:c8:4e:6f:b3:42:1b:cb:
         61:86:36:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org